Privacy & data
Privacy policy
GeoConvert is designed to keep your GIS data private. This policy explains what happens to your files and the limited information the site may process.
Last updated: October 12, 2026
Free browser-based conversions
Free conversions run locally in your browser. Your selected GIS files and converted output are not uploaded to GeoConvert servers, and GeoConvert does not read, store, or share their contents.
Optional server-side conversions
Server-side features upload files to Cloudflare R2 over HTTPS using presigned upload and download URLs. Input and output objects expire after one day and are typically deleted within the following 24 hours. GeoConvert does not use file contents for advertising, model training, or unrelated purposes.
Preferences, accounts, and service data
Choosing a language stores a NEXT_LOCALE preference cookie for up to one year. If account features are enabled, Clerk processes authentication and session data. A server-side job stores the Clerk user ID, original filename and size, source and target CRS, job status, output metadata, warnings, and timestamps in Neon Postgres. These job records are not automatically deleted; contact GeoConvert to request deletion. The hosting platform may process basic request, security, and error logs needed to operate and protect the service.
Analytics and third parties
Vercel Analytics is enabled and measures site usage. GeoConvert also stores anonymous conversion events and voluntary problem reports in Neon Postgres: format pairs, conversion stages, predefined error categories, and duration ranges. No filenames, file contents, coordinates, raw errors, account IDs, or persistent visitor IDs are included. Records older than 90 days are removed when subsequent events are processed. Abuse protection stores a keyed IP digest that changes every minute; old digests are removed on subsequent requests after two minutes. Email and GitHub have their own privacy policies. Anonymous tutorial events additionally record allowlisted article, format and public sample identifiers for tool links, sample download clicks, successful conversions and result download clicks. Attribution reads the article query parameter only on its matching conversion page; it creates no attribution cookie or browser storage and stores no full URL or query string. These events follow the same 90-day retention and subsequent-event deletion policy.
Error diagnostics
To detect conversion and application failures, GeoConvert sends limited diagnostics to Vercel and Neon Postgres: error category and code, processing stage, source and target format, application version, and server receipt time. Diagnostics exclude file contents, filenames, coordinates, raw error messages, stacks, URLs, query parameters, tokens, and user identifiers. Reports are rate-limited and deduplicated, without diagnostic cookies or persistent identifiers. Hosting infrastructure may process IP addresses and request metadata. Diagnostics are retained in Neon Postgres for 30 days. Daily cleanup and new writes remove expired records, normally within one additional day; cleanup failures may delay deletion. Vercel log retention follows the hosting plan. Reports may be dropped and do not measure every failure.
Your choices and data rights
You can remove the language cookie through your browser settings and avoid optional account or server-side features. You may contact GeoConvert to ask about personal information associated with a direct support request or enabled account feature, or to request correction or deletion where applicable.
Policy changes
This policy may be updated when GeoConvert features or service providers change. Material changes will be reflected on this page with a revised last-updated date.
Have a privacy question or request? Contact GeoConvert